This document discusses participant mapping and permission control in Joget Workflow. It covers mapping participants to users, groups, org charts, and variables. The five permission layers of process, form, form section, userview, and userview category are described. The document provides examples of mapping for a leave application and setting permissions to restrict access for anonymous users. It emphasizes that all participants must be mapped and permissions can control access to processes, forms, and userviews.

1. All Rights Reserved © Joget Inc
Joget Workflow v5
Participant Mapping and
Permission Control
http://facebook.com/jogetworkflow
http://twitter.com/jogetworkflow
Last Revised on May 2016Joget Inc Internal Use Only

2. All Rights Reserved © Joget Inc
Prerequisites
• General understanding of all major Joget components (i.e.
Process, Form, List and Userview)
Joget Inc Internal Use Only

3. All Rights Reserved © Joget Inc
Content
1. Participant Mapping
2. Application Permission Control
Joget Inc Internal Use Only

4. All Rights Reserved © Joget Inc
Chapter 1
Participant Mapping
Joget Inc Internal Use Only

5. All Rights Reserved © Joget Inc
Participant Mapping
• User Mapping Categories
– Map to User or Group
– Map to Org Chart
– Map to Workflow Variable
– Map to Plugin
Joget Inc Internal Use Only

6. All Rights Reserved © Joget Inc
Plugin Types
Joget Inc Internal Use Only

7. All Rights Reserved © Joget Inc
Participant Mapping for Leave App
All Participants
must be mapped
Joget Inc Internal Use Only

8. All Rights Reserved © Joget Inc
Workflow Participant Mapping
All users
Applicant’s HOD
Joget Inc Internal Use Only

9. All Rights Reserved © Joget Inc
Approver: Performer’s HOD
Approver is Performer’s HOD where the
performer executed Previous Activity
Joget Inc Internal Use Only

10. All Rights Reserved © Joget Inc
Publish the App
• With the Participant Mapping performed, we are now
ready to Publish the App for End Users to continue
testing.
Joget Inc Internal Use Only

11. All Rights Reserved © Joget Inc
Publish the App
• The App must be published first before end users can
access it.
Joget Inc Internal Use Only

12. All Rights Reserved © Joget Inc
Login as cat/password
• Open up Leave Portal.
Joget Inc Internal Use Only

13. All Rights Reserved © Joget Inc
Test Run the Workflow Process
• With the participant mapping set, run the process again
as the user “cat” through the Leave Portal.
Joget Inc Internal Use Only

14. All Rights Reserved © Joget Inc
Sample Organization Chart
First name is the username,
and password is password.
e.g: terry/password
Joget Inc Internal Use Only

15. All Rights Reserved © Joget Inc
Who is Cat Grant’s HOD?
Joget Inc Internal Use Only

16. All Rights Reserved © Joget Inc
Did the user get the assignment?
• Check using what you have learned in the previous
chapter on who is assigned to the task.
Joget Inc Internal Use Only

17. All Rights Reserved © Joget Inc
Important Notes
• All participants MUST be mapped.
• Do NOT choose activity from the same swim lane as the
participant that is being mapped unless it is intended so.
• Choose only activity that has been completed.
• If NO user is found, it will be defaulted to the last
performer. (Possibly, the current logged in user who had
just completed the prior activity)
Joget Inc Internal Use Only

18. All Rights Reserved © Joget Inc
Chapter 1 Review
We have learnt to:
1. Understand various Participant Mapping options
available.
2. Understand the important rules in Participant Mapping.
3. Able to relate and manage participant mapping with the
administrative process monitoring module.
Joget Inc Internal Use Only

19. All Rights Reserved © Joget Inc
Chapter 2
Application Permission
Control
Joget Inc Internal Use Only

20. All Rights Reserved © Joget Inc
Introduction
• Permission Control is used to exert control and manage
access to various components in a developed Joget App.
Joget Inc Internal Use Only

21. All Rights Reserved © Joget Inc
Reviewing various components with
potential access control
• How would a user access the app?
• What can a user do after accessing the app?
• List down what the user can explicitly do within the app.
Joget Inc Internal Use Only
User

22. All Rights Reserved © Joget Inc
3 Categories
• Process
• Form
• Userview
Joget Inc Internal Use Only

23. All Rights Reserved © Joget Inc
5 Permission Layers
• Process
– Process Start White List
• Form
– Form
– Form Section
• Userview
– Userview
– Userview Category
Joget Inc Internal Use Only

24. All Rights Reserved © Joget Inc
Process Start White List
• Controls on who can start/run the Process.
• Available in each Process
Joget Inc Internal Use Only

25. All Rights Reserved © Joget Inc
Form
• Controls on who can see the Form.
Joget Inc Internal Use Only

26. All Rights Reserved © Joget Inc
Form Section
• Controls on who can see the Form Section.
Joget Inc Internal Use Only

27. All Rights Reserved © Joget Inc
Userview
• Controls on who can access the Userview.
Joget Inc Internal Use Only

28. All Rights Reserved © Joget Inc
Userview Category
• Controls on who can see the Userview Category.
Joget Inc Internal Use Only

29. All Rights Reserved © Joget Inc
Typical Permission Control Precedence
1. Userview (top)
2. Userview Category
3. Process Start White List
4. Form
5. Form Section
Joget Inc Internal Use Only

30. All Rights Reserved © Joget Inc
Discussion
• With permission control available at the Form level and
Form section level, why don’t we have Form Field level
permission control?
Discuss.
Joget Inc Internal Use Only

31. All Rights Reserved © Joget Inc
Exercise
• Modify your App in such a way that:-
– Anonymous user will not be able to see anything except for the
landing page “Home”.
– Only users from the “Managers” group can see the “List All”
menu item.
Joget Inc Internal Use Only

32. All Rights Reserved © Joget Inc
Discussion
• What would you want the anonymous users see when
they visit the App Center? Should all the apps be made
secure at the first place?
Joget Inc Internal Use Only

33. All Rights Reserved © Joget Inc
More…
• Visit http://dev.joget.org/community/display/KBv5/Permission+Control for
list of permission plugins and up-to-date documentation.
33All Rights Reserved © Joget Inc

34. All Rights Reserved © Joget Inc
Module Review
1. Participant Mapping
2. Application Permission Control
Joget Inc Internal Use Only

35. All Rights Reserved © Joget Inc
Stay Connected with Joget Workflow
• http://www.joget.org
• http://community.joget.org
• http://twitter.com/jogetworkflow
• http://facebook.com/jogetworkflow
• http://youtube.com/jogetworkflow
• http://slideshare.net/joget
Joget Inc Internal Use Only